Privacy Policy

The Sunport Power Polska website is owned by 4DIGITAL Krzysztof Pałuszyński, which acts as the administrator of your personal data.

We have adopted this Privacy Policy to explain how 4DIGITAL Krzysztof Pałuszyński processes information collected through the website and why we must collect certain personal data about you. Please read this Privacy Policy before using the Sunport Power Polska website. We care about your personal data and commit to ensuring its confidentiality and security.

1. Data Administrator and Contact

The administrator of your personal data is 4DIGITAL Krzysztof Pałuszyński, NIP:8311025584 (hereinafter "Administrator").
You can contact the Administrator regarding data protection matters at: biuro@sunportpower.pl or by mail to the Administrator's registered address.
If the Administrator appoints a Data Protection Officer, their contact details will be provided on the website.

2. Personal Data We Collect

When you visit the Sunport Power Polska website, we automatically collect certain information about your device, including browser type, IP address, time zone, and some cookies installed on your device.

Additionally, while browsing the website, we collect information about specific pages or products you view, websites or search terms that referred you to our site, and how you interact with the website. We call this automatically collected data "Device Information".

We may also collect personal data you voluntarily provide (e.g., name, surname, company name, address, email address, phone number, payment details) when filling out forms, registering, or placing orders (if such functionality is available) to fulfill contracts.

3. Purposes and Legal Bases for Data Processing

Our priority is customer data security. We process only the minimum necessary user data required for the website's operation and maintenance.

Automatically collected information is used solely to identify potential abuse and generate usage statistics. Statistical data is not combined in a way that identifies specific users.

You can visit the website without revealing your identity. However, to use certain features, subscribe to newsletters, or provide additional information via forms, you may be asked to provide personal data such as email address, name, surname, city of residence, organization name, or phone number.

You may refuse to provide personal data, but this may prevent access to certain website features (e.g., newsletter subscription or direct contact via forms). Contact us at biuro@sunportpower.pl if unsure which information is mandatory.

We process data for the following purposes under GDPR legal bases:

Handling inquiries and communications via forms/email – Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (Administrator's legitimate interest – correspondence handling)
Preparing and fulfilling contracts/orders – Art. 6(1)(b) GDPR
Meeting legal obligations (tax/accounting) – Art. 6(1)(c) GDPR
Website analytics, IT security, claims handling – Art. 6(1)(f) GDPR
Newsletter/marketing – your consent (Art. 6(1)(a) GDPR) and electronic communication laws
Consent can be withdrawn at any time without affecting prior processing lawfulness.

4. Data Retention Period

We store your personal data only for the period necessary to achieve processing purposes, plus legally required retention or claim limitation periods:

Inquiry/correspondence data – until communication ends + claim limitation period
Contract data – during contract term + claim limitation period
Tax/accounting data – per relevant laws
Consent-based data (e.g., newsletter) – until withdrawal/objection + claim limitation period
After these periods, data is deleted or anonymized per our procedures.

5. Data Recipients and Transfers Outside EEA

Your data may be disclosed to:

Authorized 4DIGITAL employees/collaborators;
IT/hosting/email/cloud/CRM/analytics/marketing service providers;
Accounting/legal/advisory/courier/postal services;
Contract fulfillment partners (logistics, service providers).

These entities process data under data processing agreements, following our instructions, confidentiality obligations, and security measures.

Data may be transferred outside the EEA (e.g., Canada/USA) for IT/analytics/marketing tools. We apply GDPR safeguards: EU Commission Standard Contractual Clauses or equivalent protection mechanisms.

6. Your Rights

If you reside in the EEA, you have the following rights regarding your personal data:

Right to be informed
Right of access
Right to rectification
Right to erasure ("right to be forgotten")
Right to restriction of processing
Right to data portability
Right to object to processing (including direct marketing)
Rights related to automated decision-making/profiling (if applicable)

You may also lodge a complaint with the President of the Personal Data Protection Office (UODO) if you believe your data processing violates GDPR.

7. Links to Other Websites

Our website may contain links to third-party websites we neither own nor control. We are not responsible for their privacy practices. Please review the privacy policies of any third-party sites collecting personal data.

8. Information Security

We store your information on secure, controlled servers protected against unauthorized access, use, or disclosure. We implement appropriate administrative, technical, and physical security measures.

However, no Internet or wireless data transmission can be guaranteed 100% secure.

9. Data Disclosure Under Law

We will disclose collected information if required/permitted by law (e.g., court orders) or if we reasonably believe disclosure is necessary to: protect our rights, ensure your/others' safety, investigate abuse, or respond to public authority requests.

10. Privacy Policy Changes

The Administrator reserves the right to amend this Privacy Policy due to legal, technological, or processing changes. Updated versions will be published with effective dates. Continued website use constitutes acceptance of the updated Policy.